Ballot SC083v3: Winter 2024-2025 Cleanup Ballot

Ballot overview

• Ballot SC083v3, Winter 2024-2025 Cleanup Ballot, was a Final Maintenance Guideline for the TLS Baseline Requirements.
• The motion proposed modifying the Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates based on Version 2.1.1.
• The ballot page says the ballot was adopted and that the quorum and voting thresholds were met.

Voting results

• Certificate Issuers: 30 votes total, 30 YES, 0 NO, 0 ABSTAIN.
• Certificate Consumers: 4 votes total, 4 YES, 0 NO, 0 ABSTAIN.
• The quorum was 11 and was met.
• The page states that the bylaws requirements were met.

Review period and ballot procedure

• Discussion period: 2025-01-08 16:00 UTC to 2025-01-15 17:00 UTC.
• Vote for approval: 2025-01-15 17:00 UTC to 2025-01-22 17:00 UTC.
• Review period start: 2025-01-23 13:00:00 UTC.
• Review period end: 2025-02-22 13:00:00 UTC.
• The IPR policy excerpt says members with Essential Claims had to submit an Exclusion Notice before the end of the Review Period.

Document changes described in the ballot

• Updated references from http to https in several definitions and references.
• Changed the CP/CPS update requirement to at least once every 366 days.
• Clarified several domain validation and Multi-Perspective Issuance Corroboration requirements.
• Clarified that some validation methods require separate validations for each additional FQDN.
• Clarified that Subject Identity Information does not include a Domain Name or an IP Address listed in subjectAltName or the Subject commonName field.
• Updated some reference standards and wording, including FIPS 186-5 and ISO 21188:2018.

Compliance impact reflected in the redline

• The CA SHALL develop, implement, enforce, and at least once every 366 days update a Certificate Policy and/or Certification Practice Statement describing how the CA implements the latest version of the Requirements.
• For several domain validation methods, CAs performing validations using the method MUST implement Multi-Perspective Issuance Corroboration.
• For several methods, once the FQDN has been validated, the CA MUST NOT issue Certificates for other FQDNs ending with all the labels of the validated FQDN unless the CA performs separate validations for each of those other FQDNs using authorized methods.
• The ballot also changes the wording for DNS change validation, IP address validation, email-based validation, ACME, and TLS using ALPN.

IPR review

• Start of Review Period: 2025-01-23 13:00:00 UTC.
• End of Review Period: 2025-02-22 13:00:00 UTC.
• The IPR policy text says Exclusion Notices must be provided before the end of the Review Period.
• The supplied evidence does not state that any exclusion notices were filed.